Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436323a3a2f34372d3438203d3e20323135393536.roa
File:                     326131343a373538303a656436323a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          uBOU1NceN+7zNIHVmAtgqYHIQjVdDKxTdNaKKVksY8c=
Subject key identifier:   3A:1F:CB:C2:EA:0F:52:DC:B9:61:ED:C6:23:BF:F3:BC:B2:CA:6F:4D
Certificate issuer:       /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial:       6A927D0AC092D34ABF550E07D06ED8785FFEB6CA
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436323a3a2f34372d3438203d3e20323135393536.roa
Signing time:             Sun 29 Mar 2026 19:22:07 +0000
ROA not before:           Sun 29 Mar 2026 19:17:07 +0000
ROA not after:            Sun 28 Mar 2027 19:22:07 +0000
asID:                     215956
IP address blocks:        2a14:7580:ed62::/47 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:92:7d:0a:c0:92:d3:4a:bf:55:0e:07:d0:6e:d8:78:5f:fe:b6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
        Validity
            Not Before: Mar 29 19:17:07 2026 GMT
            Not After : Mar 28 19:22:07 2027 GMT
        Subject: CN=3A1FCBC2EA0F52DCB961EDC623BFF3BCB2CA6F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:e1:c3:f7:93:a9:c6:d7:d1:3a:73:63:0e:
                    31:b9:3f:03:c8:32:d8:a9:70:93:27:26:7c:d3:37:
                    0d:a9:a5:68:1e:82:eb:9d:ea:14:08:89:5f:54:3d:
                    8b:24:84:d7:38:79:d3:29:e5:8c:0a:78:c1:c4:55:
                    b7:61:93:41:1a:0c:20:55:dc:e0:56:a9:4b:99:ee:
                    e8:2e:62:43:b9:22:c7:fb:78:23:4a:7e:8f:92:a7:
                    d9:0a:13:bb:9f:d1:a0:14:dc:4c:b2:7b:df:74:e9:
                    9d:52:c0:1f:c4:a4:62:d6:37:72:f3:ff:0f:46:85:
                    34:6d:64:03:f9:83:16:2c:24:61:cc:41:aa:e5:34:
                    cd:4b:6d:4e:3b:6d:08:3f:cc:2c:76:60:10:67:1c:
                    52:2b:b7:09:d1:81:6a:fd:ca:56:57:3c:1e:46:b5:
                    05:60:b6:a2:01:0e:98:16:b8:de:17:25:ca:1d:7d:
                    ce:6d:7d:11:8a:d5:1d:5c:dc:d3:5a:c9:76:18:cb:
                    d8:e8:54:d8:58:e7:23:4c:e5:4c:4d:56:a8:c9:7a:
                    c6:43:81:43:c7:27:c1:a5:43:f3:ee:65:ea:39:b4:
                    1e:b4:72:d2:a6:64:46:1e:f6:5a:9e:bb:5d:e8:48:
                    9b:5e:b2:3d:d9:76:b6:e9:1e:ad:fb:a6:61:11:c2:
                    27:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1F:CB:C2:EA:0F:52:DC:B9:61:ED:C6:23:BF:F3:BC:B2:CA:6F:4D
            X509v3 Authority Key Identifier:
                keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656436323a3a2f34372d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ed62::/47

    Signature Algorithm: sha256WithRSAEncryption
         28:e6:df:1d:9d:39:6a:93:2d:7c:84:cc:14:87:16:ec:53:2e:
         66:2f:fb:59:81:ae:27:f2:2a:46:1d:ba:30:5f:74:7b:a7:13:
         05:57:30:6d:d5:d5:f5:5e:1a:cf:e8:fe:22:92:bc:c2:b2:50:
         67:dd:66:b3:77:c8:5e:84:d8:b2:00:1c:2a:6e:8f:ad:de:d3:
         d9:12:6c:ec:d5:43:d6:ea:8b:9c:59:d8:6a:fc:e5:76:f6:1d:
         02:c8:31:28:0d:8d:1c:b4:a6:1a:ae:3a:0f:43:5a:76:2d:0b:
         54:15:8f:f4:af:11:4a:ad:f9:3d:51:2d:8b:ed:36:1b:1d:9f:
         df:13:63:36:c1:80:ac:01:4f:ce:37:e1:64:29:e5:3b:8f:f2:
         b8:cf:6f:b4:81:ed:e0:00:2a:ca:cf:89:61:06:3c:ac:d9:f1:
         a3:0a:dd:67:fc:77:5f:bb:0d:ac:7a:cb:cd:dd:dd:de:9f:65:
         d1:65:d0:06:df:db:56:cc:2a:71:2f:86:24:15:0e:77:a0:92:
         2a:f2:05:6d:45:99:8a:d3:5c:f1:cf:65:12:a4:f4:55:e5:4a:
         f7:c5:2a:c4:42:11:44:b2:61:df:f2:87:27:bf:bb:89:d4:00:
         91:0f:31:f5:7d:bf:80:51:30:ae:76:7a:f5:7e:47:04:75:c8:
         dc:01:04:92
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUapJ9CsCS00q/VQ4H0G7YeF/+tsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNjAzMjkxOTE3MDdaFw0yNzAzMjgxOTIyMDdaMDMxMTAvBgNV
BAMTKDNBMUZDQkMyRUEwRjUyRENCOTYxRURDNjIzQkZGM0JDQjJDQTZGNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg8uHD95OpxtfROnNjDjG5PwPI
MtipcJMnJnzTNw2ppWgeguud6hQIiV9UPYskhNc4edMp5YwKeMHEVbdhk0EaDCBV
3OBWqUuZ7uguYkO5Isf7eCNKfo+Sp9kKE7uf0aAU3Eyye9906Z1SwB/EpGLWN3Lz
/w9GhTRtZAP5gxYsJGHMQarlNM1LbU47bQg/zCx2YBBnHFIrtwnRgWr9ylZXPB5G
tQVgtqIBDpgWuN4XJcodfc5tfRGK1R1c3NNayXYYy9joVNhY5yNM5UxNVqjJesZD
gUPHJ8GlQ/PuZeo5tB60ctKmZEYe9lqeu13oSJtesj3ZdrbpHq37pmERwidpAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUOh/LwuoPUty5Ye3GI7/zvLLKb00wHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjQzNjMyM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcBKhR1gO1iMA0GCSqGSIb3DQEBCwUAA4IBAQAo
5t8dnTlqky18hMwUhxbsUy5mL/tZga4n8ipGHbowX3R7pxMFVzBt1dX1XhrP6P4i
krzCslBn3Wazd8hehNiyABwqbo+t3tPZEmzs1UPW6oucWdhq/OV29h0CyDEoDY0c
tKYarjoPQ1p2LQtUFY/0rxFKrfk9US2L7TYbHZ/fE2M2wYCsAU/ON+FkKeU7j/K4
z2+0ge3gACrKz4lhBjys2fGjCt1n/Hdfuw2sesvN3d3en2XRZdAG39tWzCpxL4Yk
FQ53oJIq8gVtRZmK01zxz2USpPRV5Ur3xSrEQhFEsmHf8ocnv7uJ1ACRDzH1fb+A
UTCudnr1fkcEdcjcAQSS
-----END CERTIFICATE-----